FIRST releases version 1.1 of the CSIRT Services Framework

The leading association of incident response and security teams released a new version of its CSIRT Services Framework. This is a formal list of services a Computer Security Incident Response Team (CSIRT) may consider implementing to address the needs of their constituency.

24th May 2017 – The Forum of Incident Response and Security Teams (FIRST) today announced it has released version 1.1 of its CSIRT Services Framework. The Framework is FIRST’s formal list of services which Computer Security Incident Response Teams (CSIRT) typically deploy to protect and respond to security threats against their constituents.

In March of 2016, FIRST published the first iteration of the framework, which was developed in collaboration with experts from 25 countries across 6 continents. The document has since seen widespread adoption and is made available at no cost as a resource to the incident response community. Alignment against the framework allows CSIRT to have a common understanding of the services they offer, the needs, and the levels of training that can support them in building out their incident response capability.

Serge Droz, a member of the FIRST Board of Directors, states: “Version 1.1 of the Services Framework is a major development over the previous release. The framework's use exceeded our expectations by far and is today helping to contribute to a more capable incident response community in ways we had not originally envisioned. I am proud that FIRST is making a positive impact on CSIRT operations around the world”.

The document was updated after significant feedback was received from experts who had reviewed the initial version. In particular, the section covering activities internal to a CSIRT has been expanded significantly since the original release.

FIRST is currently working to expand its framework coverage to include Product Security Incident Response Teams (PSIRT), entities who respond to security vulnerabilities in products. These services will be covered in a separate document to be released later this year.

The updated framework can be downloaded from the FIRST web site at
https://www.first.org/education/csirt_service-framework_v1.1.

About FIRST

Founded in 1990, the Forum of Incident Response and Security Teams (FIRST) consists of internet emergency response teams from more than 360 corporations, government bodies, universities and other institutions across 78 countries in the Americas, Asia, Europe, Africa, and Oceania. It promotes cooperation among computer security incident response teams. For more information, visit: https://www.first.org.

MEDIA CONTACTS:

Harry Saunders
Four Communications
Tel: +44 (0)20 3697 4329 or +44 (0)20 3697 4351
Email: harry.saunders@fourcommunications.com